2019-02 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4487038)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x86-based Systems (KB4487038)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Security Update for Adobe Flash Player for Windows 10 Version 1709 for ARM64-based Systems (KB4487038)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4487017)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x86-based Systems (KB4487025)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Cumulative Update for Windows 10 Version 1803 for ARM64-based Systems (KB4487017)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4487044)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2019-02 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4487044)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2019-02 Cumulative Update for Windows 10 Version 1703 for x86-based Systems (KB4487020)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2019-6527

PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted...

Cumulative Update 22 for Exchange Server 2013

Cumulative Update 22 for Exchange Server 2013 Cumulative Update 22 for Microsoft Exchange Server 2013 was released on February 12, 2019. This cumulative update is a security update. This cumulative update includes fixes for nonsecurity issues and all previously released fixes for security and...

Default configuration

A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local account with a static password. The account has privileges only to reboot the device. An attacker coul...

RARLAB WinRAR ACE Format Input Validation Remote Code Execution

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...

February 5, 2019, update for Office 2016 (KB4022161)

None None...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.38-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware. Vulnerability Details Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Fl...

Monitoring Plugin did not apply CSRF protection even if enabled in Jenkins

Monitoring Plugin provides a standalone JavaMelody servlet with an independent CSRF protection configuration. Even if Jenkins had CSRF protection enabled, Monitoring Plugin may not have it enabled. Monitoring Plugin now checks on startup whether Jenkins has CSRF protection enabled and enables its...

Compatibility update for upgrading to Windows 10, version 1809: January 22, 2019

None None...

Privilege Escalation

libbind9.so is vulnerable to privilege escalation. Due to an unquoted service path configuration of the BIND installer, a local Windows user is able to escalate privileges to Administrator. Successful exploitation of the vulnerability will require the lcoal attacker to have permissions to write a...

CVE-2019-0013

The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...